Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner
https://www.nextron-systems.com/compare-our-scanners/
GNU General Public License v3.0
3.4k stars 583 forks source link

Add YARA repositories manually #227

Closed zaqes closed 3 weeks ago

zaqes commented 1 year ago

Would be nice if this could be included. I guess I could just update the UPDATE_URL_SIGS with the URLs (?), but a command would be nice.

Neo23x0 commented 1 year ago

That's YARA rule management; not necessarily a task of the scanner. Furthermore, other YARA rule repos are often shit. They contain expensive rules or rules that trigger tons of FPs. So be careful using them.

zaqes commented 1 year ago

That's true!

So update the list in UPDATE_URL_SIGS would be the best way forward at the moment?